CVE-2017-9457

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware

published July 25, 2017

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware. The absence of signature validation allows an attacker with administrator privileges to flash a modified UEFI BIOS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00826 · 56.7th percentile
Published
2017-07-25T14:00Z
EPSS history
Timeline
  • 25 JUL 14:00Z
    Intense PC Phoenix SecureCore UEFI firmware does not perform capsule signature validation before upgrading the system firmware
    cvelistv5